CVE-2008-2509
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Excuse Online中的pwd.asp存在SQL注入漏洞。远程攻击者可以借助pid参数，执行任意的SQL指令。
Public Exploits 1
ExploitDB · 1
EDB-31843 [webapps]
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2008-2509
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
SQL injection vulnerability in pwd.asp in Excuse Online allows remote attackers to execute arbitrary SQL commands via the pID parameter.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Excuse Online 'pwd.asp' SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Excuse Online中的pwd.asp存在SQL注入漏洞。远程攻击者可以借助pid参数，执行任意的SQL指令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2008-2509
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2008-2509
请登录查看更多情报信息。
Vendor Advisories for CVE-2008-2509 (3)
Other References for CVE-2008-2509 (1)
-
http://www.chroot.org/exploits/chroot_uu_002 x_refsource_MISC
Same Patch Batch · n/a · 2008-05-29 · 22 CVEs total
| CVE-2008-0955 | Creative Labs Creative软件自动升级引擎 CacheFolder参数 ActiveX控件栈溢出漏洞 | |
| CVE-2008-2500 | mambo mostlyce 跨站脚本攻击漏洞 | |
| CVE-2008-2499 | IBM Lotus Sametime 多个缓冲区溢出漏洞 | |
| CVE-2008-2158 | EMC AlphaStor服务器代理多个栈溢出漏洞 | |
| CVE-2008-2157 | EMC AlphaStor库管理器CreateProcess()函数任意命令执行漏洞 | |
| CVE-2008-2137 | Linux Kernel SPARC平台mmap()调用本地拒绝服务漏洞 | |
| CVE-2008-2054 | cisco ciscoworks_common_services 未明漏洞 | |
| CVE-2008-1672 | OpenSSL 代码问题漏洞 | |
| CVE-2008-1105 | Samba 缓冲区错误漏洞 | |
| CVE-2008-0959 | NCTAudioInformation2 'NCTAudioInformation2.dll' ActiveX控件栈缓冲区溢出漏洞 | |
| CVE-2008-0958 | Online Media Technologies NCTAudioGrabber2 'NCTAudioGrabber2.dll' ActiveX控件栈溢出漏洞 | |
| CVE-2008-2501 | henning_stoverud phphotoalbum 'thumbnails.php''displayimage.php' SQL注入漏洞 | |
| CVE-2008-0891 | OpenSSL 数字错误漏洞 | |
| CVE-2008-2510 | WordPress Upload File 'wp-uploadfile.php' SQL注入漏洞 | |
| CVE-2008-2508 | Tr Script News 'news.php' 跨站脚本攻击漏洞 | |
| CVE-2008-2507 | Brown Bear Software Calcium 'Calcium40.pl'跨站脚本攻击漏洞 | |
| CVE-2008-2506 | Simpel Side Weblosninger 'index2.php' SQL注入漏洞 | |
| CVE-2008-2505 | Simpel Side Weblosninger跨站脚本攻击漏洞 | |
| CVE-2008-2504 | Simpel Side Netbutikker'netbutik.php''product.php' 多个SQL注入漏洞 | |
| CVE-2008-2503 | sourceforge emule_x-ray 缓冲区溢出漏洞 |
Showing top 20 of 22 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2008-2509
No comments yet